Error in Observateur Evenement

[PapyNet]

Hello!
Excuse me but I speak english very very badly!
At each start windows XP SP2 this error  
Error in aswChestS: chestAddSystemFiles Error 3.  
in "journal" Antivirus
Why ?

Congratulations
Georges

[CharleyO]

*

Welcome to the forums, PapyNet !      

No problem with what you wrote above.
I can not help you but someone will in a short time, I think !    

*

[Lisandro]

At each start windows XP SP2 this error  
Error in aswChestS: chestAddSystemFiles Error 3.

That seems to mean that avast could not 'backup' some (in fact three) system files into Chest.
Did that come in a pop-up window? Or you saw that into 'Windows Events' (or even into avast Log viewer)?

[PapyNet]

Hello!
Windows Events

and to each boot or reboot

Congratulations
Georges

[PapyNet]

In log :
15/09/2004   21:34:52   1095276892   AUTORITE NT\SYSTEM   1160   Error in aswChestS: chestOpenListLoc Error 3.  
15/09/2004   21:34:53   1095276893   AUTORITE NT\SYSTEM   1160   Error in aswChestS: chestAddSystemFiles Error 3.  
15/09/2004   22:41:28   1095280888   AUTORITE NT\SYSTEM   1068   Error in aswChestS: chestOpenListLoc Error 3.  
15/09/2004   22:41:28   1095280888   AUTORITE NT\SYSTEM   1068   Error in aswChestS: chestAddSystemFiles Error 3.  
15/09/2004   22:50:16   1095281416   AUTORITE NT\SYSTEM   1072   Error in aswChestS: chestOpenListLoc Error 3.  
15/09/2004   22:50:16   1095281416   AUTORITE NT\SYSTEM   1072   Error in aswChestS: chestAddSystemFiles Error 3.  
16/09/2004   06:41:49   1095309709   AUTORITE NT\SYSTEM   1072   Error in aswChestS: chestOpenListLoc Error 3.  
16/09/2004   06:41:49   1095309709   AUTORITE NT\SYSTEM   1072   Error in aswChestS: chestAddSystemFiles Error 3.  
17/09/2004   08:11:29   1095401489   AUTORITE NT\SYSTEM   1076   Error in aswChestS: chestOpenListLoc Error 3.  
17/09/2004   08:11:29   1095401489   AUTORITE NT\SYSTEM   1076   Error in aswChestS: chestAddSystemFiles Error 3.  
17/09/2004   10:14:51   1095408891   AUTORITE NT\SYSTEM   1072   Error in aswChestS: chestOpenListLoc Error 3.  
17/09/2004   10:14:51   1095408891   AUTORITE NT\SYSTEM   1072   Error in aswChestS: chestAddSystemFiles Error 3.  
17/09/2004   13:00:18   1095418818   AUTORITE NT\SYSTEM   1096   Error in aswChestS: chestOpenListLoc Error 3.  
17/09/2004   13:00:18   1095418818   AUTORITE NT\SYSTEM   1096   Error in aswChestS: chestAddSystemFiles Error 3.  

[PapyNet]

Dans area "quarantaine" :
Kernel32 Winsock wsock32 .dll

Georges

[vojtech]

Does the file C:\Program Files\ALWIL Software\Avast4\DATA\chest\index.xml exist ?
And the folder %TEMP%\_avast4_ ? (%TEMP% is an environment variable, you can see its value in Control Panel->System->Advanced->Environment variables)

[PapyNet]

Hello!
xlm exist to data\chest :
<?xml version="1.0" encoding="UTF-8" ?>
- <aswObject>
  <NewId>00000001</NewId>
  <Size>0</Size>
  </aswObject>

All Temp are deleted at boot in windows open
 
What program or service "post" this event ?

Bien cordialement
Georges

[vojtech]

This is generated during start of "avast! Antivirus" service.
You use some utility that deletes the temporary folder contents ?

[PapyNet]

hello!
in .bat with :
rd  /S /Q       k:\Windows\Temp
md                k:\Windows\Temp\

rd /S /Q          k:\"Documents and Settings"\Georges.ATHOME\"Local settings"\Temp
md                     k:\"Documents and Settings"\Georges.ATHOME\"Local settings"\Temp

I have tested without  rd : same

It's possible to start avast in menu start ?
Yes? like ?

Merci d'avance
Bien cordialement
Georges

[PapyNet]

Hello!

I re-installed Avast and the problem it's the same

Idea ?

Congratulations
Georges

[Eddy]

Did you remove Avast with the uninstall utillity before reinstalling?
If not, give it a try.
http://www.avast.com/eng/download/programs/avast_uninstall_util.html

- Remove Avast with that util.
- Reboot
- Install Avast
 If you have XP Pro make sure you are logged in as ADMINISTRATOR
 (not as user with admin rights, but as true administrator)
 If you have XP Home, make sure you are logged in as user of the  admin group.
- Reboot
- Again login as ADMINISTRATOR
- Check if Avast is working.

- Let us know if this is of any help.

[PapyNet]

Hello!

XP Pro SP2!
always this 2 messages to each boot :

24/09/2004 07:23:28   AUTORITE NT\SYSTEM   1084   Error in aswChestS: chestOpenListLoc Error 3.  
24/09/2004 07:23:28   AUTORITE NT\SYSTEM   1084   Error in aswChestS: chestAddSystemFiles Error 3.  

xlm :
<?xml version="1.0" encoding="UTF-8"?>
<aswObject>
   <NewId>00000005</NewId>
   <Size>1105200</Size>
   <ChestEntry>
      <ChestId>00000001</ChestId>
      <FileTime>1091573670</FileTime>
      <OrigFileName>kernel32.dll</OrigFileName>
      <OrigFolder>K:\WINDOWS\system32</OrigFolder>
      <Comment/>
      <Category>System</Category>
      <TransferTime>1095744052</TransferTime>
      <FileSize>1048576</FileSize>
   </ChestEntry>
   <ChestEntry>
      <ChestId>00000002</ChestId>
      <FileTime>1051210800</FileTime>
      <OrigFileName>winsock.dll</OrigFileName>
      <OrigFolder>K:\WINDOWS\system32</OrigFolder>
      <Comment/>
      <Category>System</Category>
      <TransferTime>1095744053</TransferTime>
      <FileSize>2864</FileSize>
   </ChestEntry>
   <ChestEntry>
      <ChestId>00000003</ChestId>
      <FileTime>1091573688</FileTime>
      <OrigFileName>wsock32.dll</OrigFileName>
      <OrigFolder>K:\WINDOWS\system32</OrigFolder>
      <Comment/>
      <Category>System</Category>
      <TransferTime>1095744053</TransferTime>
      <FileSize>25088</FileSize>
   </ChestEntry>
   <ChestEntry>
      <ChestId>00000004</ChestId>
      <FileTime>1061204110</FileTime>
      <OrigFileName>pspv.exe</OrigFileName>
      <OrigFolder>K:\DOCUME~1\GEORGE~1.ATH\LOCALS~1\Temp\AAWTMP\C43268096</OrigFolder>
      <Comment></Comment>
      <Virus>Win32:Trojan-gen. {UPX!}</Virus>
      <Category>Vir</Category>
      <Restore>yes</Restore>
      <TransferTime>1095962428</TransferTime>
      <FileSize>28672</FileSize>
   </ChestEntry>
</aswObject>

Bien cordialement
Georges

[Phi]

PapyNet,

I used to have this same problem. For my case, on top of that problem that you've described, the auto-update function also failed, although manual update works perfectly.

I found out, through pure luck, that the cause of my problem is because my "system environment variables" for 'TEMP' & 'TMP' are pointing to an invalid directory.

I used to have a RAMDISK pointing to Z:, and thus, I defined the following "system variables":

  TEMP = Z:\
  TMP = Z:\

And with that, I installed Avast, and Avast was working fine for a long time, until I decided to remove my RAMDISK, and forget to re-define these 2 variables to point to a new temp-directory. As a result, Avast started to exhibit those behaviours that I described above. After I re-defined the 2 variables to point to a proper and valid directory (e.g. C:\temp), and rebooted my PC, Avast immediately reverted back to it's normal mode and did everything correctly. I'm a happy man now.

Here's how you can check whether your environment variables are correctly defined:

1. Do a mouse-right-click on 'My Computer' icon, and select 'Properties'.
2. A 'System Properties' window will pop-up.
3. Click on 'Advanced' tab.
4. At the bottom of the window, click on 'Environment Variables' button.
5. Another window will pop-up, displaying 2 sections -- User vs System
6. Check both sections for the variables 'TEMP and 'TMP'.
7. Change them to point to a valid directory.
8. Reboot PC.
9. See if Avast is working fine now.

Hope this helps.

Cheers,
Phi.

[PapyNet]

Hello!
In French :
J'ai placé le service "avast! Antivirus" sur Manuel.
Dans Démarrer Programmes Démarrage j'ai mis un raccourci vers une .bat qui fait Net Start "avast! Antivirus"
et les erreurs ne sont plus dans le journal des événéments

In English with traduction :
I placed the service "avast!  Antivirus" on Manual.  In To Start up Program Start I put a short cut towards .bat  that does :
Net Start "avast!  Antivirus"
 and the errors are not anymore in the newspaper of the événéments